goauthentik / goauthentik/authentik

Kerberos provider

Open
#5,990 9 comments 26 reactions 1 assignee Claimed by @rissson View on GitHub
enhancement hackathon
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 1h
Merged PRs (30d)
644

Description

**Describe the idea**

Implement a Kerberos provider. authentik would act as a KDC, allowing users to get keytabs for services.

I've already laid out some ground work at https://github.com/rissson/authentik/tree/kerberos-as-proxy, but that's very much a WIP.

The idea behind that implementation is that authentik would receive KDCProxy requests at `/application/k/my_app/proxy/`, decode them and process the request from there. Technically, it could be implemented as an outpost, but I don't want to do that as we need to make some database access (as the user's keytab is retrieved multiple times during authentication), and because I don't want to write Go for fun.

If you want to help working on this idea or want to contribute in any other way, react to this issue with a :rocket:

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.